Steam suffers a leak of 89 million data that could be a sign to change your

In recent days we have talked a lot on MARCA GAMING about Steam, the platform for buying computer video games. LaLiga's blocks to combat piracy would have directly affected the platform. But the bad news does not leave Steam alone, as today it has been revealed that it has suffered a big problem with its customers' information.

As it has become known, 89 million Steam data have been put up for sale on the black market, something that, if true, would mean that many of these s would be in danger as they could lose hundreds of titles. Therefore, first of all, if you haven't changed your for a long time, we recommend you do so now, as it is better to be safe than sorry.

The Steam data breach

This information has gone viral on social media and many s have been reporting on the issue, such as @MellowOnline1, where we had the detailed explanation of the Steam situation: "The alleged Steam data breach is not a direct breach of Steam itself, but rather a supply chain compromise, meaning that an external service that Steam relies on was the target."

In addition, he pointed to a company as the possible culprit for this situation: "New evidence confirms that there is some real data involved: a sample of the leaked data includes records of real-time SMS, which are used in two-factor authentication (2FA). Twilio is the provider: Twilio is a company that offers communication services, such as sending two-factor authentication (2FA) codes by SMS. Steam uses (or used) Twilio for this".

The positive part is that the attack was not directly against Steam itself: "The implication is that the alleged Mipped seller has access to Twilio's backend. This is not a direct attack on Steam: Steam's internal servers or databases do not appear to have been compromised. However, since they rely on Twilio for sending two-factor authentication codes, this also affects their s".

The leaked information includes

• Message content (e.g. 2FA codes)
• Delivery status (e.g. sent, delivered, failed)
• Metadata (timestamps, recipient numbers, etc.)
• Routing costs (how much it costs to send each message)

Why is it dangerous?

• Phishing: Hackers could use the information to send fake but convincing messages to s.
• Session hijacking: If attackers can intercept or replay 2FA codes, they could by protection.